1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in the full privacy policy listed below.

Data Collection on This Website Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information about the Controller” in this privacy policy. How do we collect your data? Your data is collected, first, by you providing it to us — for example, data you enter in a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. These are mainly technical data (e.g., internet browser, operating system, time of page access). This data is collected automatically as soon as you enter this website. What do we use your data for? Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the data transmitted may also be processed for contract offers, orders, or other inquiries. What rights do you have regarding your data? You have the right to obtain free information at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of your data. If you have given consent for data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this and any other questions about data protection. Analytics Tools and Third-Party Tools When visiting this website, your browsing behaviour may be statistically evaluated. This is mainly done using analytics programs. Detailed information can be found in the full privacy policy below.

2. Hosting We host the content of this website with the following provider: onepage.io We have integrated onepage.io on this website. Provider: Onepage GmbH, Neue Rothofstr. 13–19, 60313 Frankfurt am Main, Germany (“onepage.io”). onepage.io enables us to build websites, landing pages, link trees, and quiz pages. All pages are generated and hosted directly by onepage.io. For this purpose, onepage.io processes personal data. All personal data that you enter on this site, or that is automatically collected, is processed and stored by onepage.io on its servers. The legal basis for processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the provision of this service. Where consent is requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time. Further details can be found in the provider’s privacy policy: https://onepage.io/de/datenschutzerklarung

3. General Notes and Mandatory Information Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy. When you use this website, various personal data may be collected. Personal data is any data by which you can be personally identified. This privacy policy explains which data we collect, how we collect it, and the purposes for which it is used. Please note that data transmission over the Internet (e.g., via email communication) may have security gaps. Complete protection of data against third-party access is not possible. Information about the Controller The controller responsible for data processing on this website is: Weiss Engineering Ltd. Attn: Daniel Weiss Florastrasse 42 8610 Uster Phone: 044 940 2006 Email: weiss@weiss.ch The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. ⸻

Storage Period Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you request deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for retaining it (e.g., tax or commercial retention obligations). In such cases, deletion occurs once these obligations expire.

Recipients of Personal Data

We work with various external service providers as part of our business activities. Personal data may be transferred to such parties where necessary for contract fulfilment, legal obligations, legitimate interests, or other lawful grounds. Processors receive data only under a valid data processing agreement. In cases of joint processing, a joint controller agreement is concluded.

Withdrawal of Consent

You may withdraw your consent at any time. This does not affect the lawfulness of processing carried out prior to withdrawal.

Right to Object (Art. 21 GDPR)

If your data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. If you object, we will no longer process your data unless we demonstrate compelling legitimate grounds. If your data is processed for direct marketing, you may object at any time; your data will no longer be used for this purpose.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your place of residence, workplace, or the location of the alleged infringement.

Right of Access, Rectification, and Erasure

You have the right—within legal limits—to access, correct, or delete your personal data. For this and other questions, you may contact us at any time. Right to Restrict Processing You may request restriction in the following cases: • You contest the accuracy of the data • Processing is unlawful and you request restriction instead of deletion • We no longer require the data, but you need it for legal claims • You object under Art. 21(1) GDPR and the balancing of interests is pending SSL/TLS Encryption This site uses SSL/TLS encryption to protect transmitted data. Encrypted connections show “https://” and a lock symbol. Objection to Marketing Emails We object to the use of published contact details for unsolicited advertising. Legal action may be taken in cases of spam or similar misuse.

4. Data Collection on This Website

Cookies

This website uses cookies — session cookies (temporary) and persistent cookies. Cookies may be first-party or third-party. Some are essential; others help analyse user behaviour or serve advertising. Legal bases: • Art. 6(1)(f) GDPR for necessary cookies • Art. 6(1)(a) GDPR and § 25(1) TDDDG where consent is required Users may configure their browser to block or delete cookies.

Contact Form

Data submitted via the contact form is processed for handling your request and stored for follow-up questions. Legal bases: • Art. 6(1)(b) GDPR for contractual matters • Art. 6(1)(f) GDPR for general inquiries • Art. 6(1)(a) GDPR where consent is obtained Data is stored until deletion is requested or no longer needed.

Inquiries by Email, Telephone, Fax

Data sent via these channels is processed to handle your request. Legal bases mirror those above. Data is stored until deletion is requested or the purpose expires.

5. Social Media

Instagram This site integrates functions of Instagram (Meta Platforms Ireland). When the plugin is active, a connection is made to Instagram servers. If logged in, Instagram may associate visits with your account. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). Joint controllership details under Art. 26 GDPR apply. Data transfers to the USA rely on Standard Contractual Clauses and DPF certification. Instagram privacy policy: https://privacycenter.instagram.com/policy/

6. Newsletter

Newsletterdaten

Newsletter sign-up requires a valid email address and consent. Data is used solely for sending newsletters. Legal basis: Art. 6(1)(a) GDPR Consent may be withdrawn at any time. Blacklisting of emails may occur to prevent misuse.

7. Plugins und Tools YouTube (Enhanced Privacy Mode) YouTube (Google Ireland) videos are integrated in enhanced privacy mode. Local storage elements may be set but no cookies. Further processing may occur beyond our control. Legal basis: • Art. 6(1)(f) GDPR • Art. 6(1)(a) GDPR / § 25(1) TDDDG (consent) Google privacy policy: https://policies.google.com/privacy

Google Maps

To display maps, your IP address is transmitted to Google servers, potentially in the USA. Google Fonts may be loaded for consistent display. Legal basis: • Art. 6(1)(f) GDPR • Art. 6(1)(a) GDPR / § 25(1) TDDDG (consent) Google privacy policy: https://policies.google.com/privacy